Hi all,

I'm using self-signed certificates between my SolrCloud (4.10.3
<http://mirror.sdunix.com/apache/lucene/solr/ref-guide/apache-solr-ref-guide-4.10.pdf>)
instance and Curl/Solr http client with needClientAuth=true on jetty.xml.
I'm able to load the Solr home page, and also make select/query calls and
they work fine.

However, when I make any Collections API calls, Basically any of the calls
that are based on "https://localhost:8984/solr/admin/collections?action=";
even using Curl locally, and a .pem file, some of the requests work, and
some of them(about 1 in 3 or more) hang indefinitely.

Has anyone run into this? How can I fix this?

Thanks,
Avanish

PS: If I switch to the SocketConnector and use HTTP, I never see the hangs.
Also, in both modes, my CPU uitilization is well below 15%. As for memory,
I have 3.7 GB total of which more than 500 MB is free even when I'm making
any requests to Solr

This is how my CURL output looks for a request that's hanging until I hit
Ctrl+C:
curl -v -E solr-ssl.pem:secret --cacert solr-ssl.pem "
https://localhost:8984/solr/admin/collections?action=CLUSTERSTATUS&wt=json&indent=on
"
* Hostname was NOT found in DNS cache* Trying 127.0.0.1...* Connected to
localhost (127.0.0.1) port 8984 (#0)* successfully set certificate verify
locations:* CAfile: solr-ssl.pem CApath: /etc/ssl/certs* SSLv3, TLS
handshake, Client hello (1):* SSLv3, TLS handshake, Server hello (2):*
SSLv3, TLS handshake, CERT (11):* SSLv3, TLS handshake, Server key exchange
(12):* SSLv3, TLS handshake, Request CERT (13):* SSLv3, TLS handshake,
Server finished (14):* SSLv3, TLS handshake, CERT (11):* SSLv3, TLS
handshake, Client key exchange (16):* SSLv3, TLS handshake, CERT verify
(15):* SSLv3, TLS change cipher, Client hello (1):* SSLv3, TLS handshake,
Finished (20):* SSLv3, TLS change cipher, Client hello (1):* SSLv3, TLS
handshake, Finished (20):* SSL connection using ECDHE-RSA-AES256-SHA384*
Server certificate:* subject: C=Country; ST=State; L=Location;
O=Organization; OU=Organizational Unit; CN=
36.38.154.104.bc.googleusercontent.com* start date: 2015-02-08 12:29:46
GMT* expire date: 2042-06-25 12:29:46 GMT* subjectAltName: localhost
matched* issuer: C=Country; ST=State; L=Location; O=Organization;
OU=Organizational Unit; CN=36.38.154.104.bc.googleusercontent.com* SSL
certificate verify ok.> GET
/solr/admin/collections?action=CLUSTERSTATUS&wt=json&indent=on HTTP/1.1>
User-Agent: curl/7.35.0> Host: localhost:8984> Accept: */*>

Reply via email to